Yaws webserver versions 1.55 and below suffer from a source code disclosure flaw when a null byte is appended to the filename being accessed.
ad42f94a077bca941b456f8f2abf8d40742de163faf4303e44afa003e94d874b
© 2024 Packet Storm. All rights reserved.